This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: 0maLxzO3sO/V/p+s/h94pvkjxrp5nqejVO3o8tY73kU= Subject key identifier: 91:FD:89:C0:09:35:9A:DC:3A:30:E5:B8:60:87:83:A8:A0:8C:5A:3A Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 53A740626C98A79A34B74E628CCC929104D387A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01CF Signing time: Sat 24 Jan 2026 08:31:28 +0000 Manifest this update: Sat 24 Jan 2026 08:26:28 +0000 Manifest next update: Tue 27 Jan 2026 19:19:28 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: j+dFdvjf42VVSSCYY4NEqAwlrAdLffkKWO+/dl+QvFE=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: MoFvv+++vTB85GXC2Kbs1Zs2yMHHdxOOMsOAsgFAkGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a7:40:62:6c:98:a7:9a:34:b7:4e:62:8c:cc:92:91:04:d3:87:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Jan 24 08:26:28 2026 GMT Not After : Jan 27 19:19:28 2026 GMT Subject: CN=91FD89C009359ADC3A30E5B8608783A8A08C5A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:3a:b8:c3:1b:20:b1:af:6f:98:67:9c:2b: 5d:46:a9:07:b9:f8:c7:e2:be:ae:78:de:81:39:ea: 63:95:b0:a1:7d:f3:d5:e0:3f:dd:66:08:63:e1:a3: 61:a9:5c:3d:d9:31:ed:b7:01:a0:65:71:28:aa:57: 71:a3:ca:ba:30:93:38:d0:1b:3b:a3:03:1e:e8:cf: c0:8c:8e:b8:0d:c1:4d:99:52:3e:a8:5e:d6:7b:fc: d5:b1:94:46:74:cd:2e:71:98:b8:38:c1:a5:53:d6: 0b:82:b0:b1:49:be:f2:b8:82:aa:3a:49:20:17:eb: d3:fe:96:cb:6c:39:ab:66:72:21:98:7c:fe:c1:a4: 4f:07:11:ee:e4:d5:84:79:f1:d2:7d:2f:87:be:0e: 11:1b:4c:89:f6:4a:bb:74:6c:41:fe:e6:ab:3e:ba: 73:b3:34:e5:89:5b:9b:2c:a3:c6:d6:66:fb:cc:c0: 7c:f8:5d:85:c5:92:67:e6:e0:ac:af:0b:a4:56:05: 98:5e:ef:19:2e:19:55:4d:50:37:73:e5:80:8a:27: 6c:42:3b:bc:67:9f:ba:dd:ea:19:be:ac:7b:a2:78: e3:dc:2f:58:80:07:e1:02:bb:6e:d4:d9:4a:3c:6f: d1:61:6f:59:70:5c:4e:ae:5f:70:de:c6:5b:af:1d: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FD:89:C0:09:35:9A:DC:3A:30:E5:B8:60:87:83:A8:A0:8C:5A:3A X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8d:3b:b9:cd:51:be:07:ad:02:9a:aa:ad:35:0e:4e:94:aa: b4:01:f7:6f:33:3e:cf:8b:ba:36:9a:37:b8:60:9d:ba:2c:97: 01:70:9c:23:61:d8:4b:8c:55:55:ad:0d:c2:24:12:b1:f5:17: 41:83:90:92:8e:f1:41:cd:d8:96:b8:05:f2:ac:08:1c:cf:0d: 82:9c:14:de:11:58:a6:6b:5e:ee:b2:2f:51:a0:96:38:db:cd: 95:39:1a:3c:9e:4b:b7:51:4b:7e:9d:af:e4:66:9b:1a:b7:2b: 2c:f0:31:34:3a:f4:75:c0:c0:45:21:36:67:2e:40:60:85:5f: 5b:eb:8c:e1:df:10:c8:59:1e:73:36:07:d9:fd:61:67:70:d9: 85:54:41:9c:7b:cc:67:6f:41:f0:b9:13:c2:42:e7:fe:26:74: ea:6c:95:5c:ee:e3:b3:6a:3b:08:ee:9a:5f:c2:2e:35:d5:1e: 38:74:5e:f4:4f:e5:f2:bf:12:27:cb:a7:cd:0e:dc:4b:f0:ec: 4c:65:b1:10:78:f7:5b:ee:8d:b0:2e:9f:99:91:bd:9d:e6:a7: f1:36:72:98:cb:ee:2c:4c:27:18:32:8f:46:61:6c:7b:c0:98: 7a:4f:2f:8b:30:93:fc:4c:bf:d4:d4:e8:7a:75:e1:36:5b:58: 32:d3:2c:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6dAYmyYp5o0t05ijMySkQTTh6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNjAxMjQwODI2MjhaFw0yNjAxMjcxOTE5MjhaMDMxMTAvBgNV BAMTKDkxRkQ4OUMwMDkzNTlBREMzQTMwRTVCODYwODc4M0E4QTA4QzVBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9djq4wxsgsa9vmGecK11GqQe5 +Mfivq543oE56mOVsKF989XgP91mCGPho2GpXD3ZMe23AaBlcSiqV3GjyrowkzjQ GzujAx7oz8CMjrgNwU2ZUj6oXtZ7/NWxlEZ0zS5xmLg4waVT1guCsLFJvvK4gqo6 SSAX69P+lstsOatmciGYfP7BpE8HEe7k1YR58dJ9L4e+DhEbTIn2Srt0bEH+5qs+ unOzNOWJW5sso8bWZvvMwHz4XYXFkmfm4KyvC6RWBZhe7xkuGVVNUDdz5YCKJ2xC O7xnn7rd6hm+rHuieOPcL1iAB+ECu27U2Uo8b9Fhb1lwXE6uX3DexluvHXy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkf2JwAk1mtw6MOW4YIeDqKCMWjowHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+NO7nNUb4HrQKaqq01Dk6UqrQB928zPs+L ujaaN7hgnboslwFwnCNh2EuMVVWtDcIkErH1F0GDkJKO8UHN2Ja4BfKsCBzPDYKc FN4RWKZrXu6yL1GgljjbzZU5GjyeS7dRS36dr+Rmmxq3KyzwMTQ69HXAwEUhNmcu QGCFX1vrjOHfEMhZHnM2B9n9YWdw2YVUQZx7zGdvQfC5E8JC5/4mdOpslVzu47Nq Owjuml/CLjXVHjh0XvRP5fK/EifLp80O3Evw7ExlsRB491vujbAun5mRvZ3mp/E2 cpjL7ixMJxgyj0ZhbHvAmHpPL4swk/xMv9TU6Hp14TZbWDLTLE4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:48 2026 by rpki-client